$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft File: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json) Hash identifier: kChg4omOPE3YrZOq9/Y3aKaUnKYPME8RCLdJshQWwlY= Subject key identifier: 2B:14:9D:C7:4B:17:B9:1D:A7:5E:07:18:A2:3F:09:C1:2E:F7:24:5E Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 0198729861CC546EC2CF50472C01C0DBA930 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft Manifest number: 0694 Signing time: Mon 04 Aug 2025 01:00:45 +0000 Manifest this update: Mon 04 Aug 2025 01:00:45 +0000 Manifest next update: Tue 05 Aug 2025 01:00:45 +0000 Files and hashes: 1: 7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa (hash: U9gIE3TvcsVcC8ANP/yj+2f+VDmJwysXxpIohNyNBO4=) 2: 92JGCVG0KGUHt67vpM0BZVn3UQE.roa (hash: I5mDPM3UZXiNkN/cQREcr6aSi6ZUeTXzLV/2lof7iyQ=) 3: 9qU_RshPDt8npKa7LLuRKWJ4eFg.roa (hash: z8T4KAMz4z5WwuZ8X7hdFs4SqXVbIIq8ewPKx0LgVz8=) 4: DHpzmZTvBAxT-43rfcQUmYozPLE.roa (hash: i/1DwqMjkRxMvpb2yMahb4K0v+eBiFoV+4UTK3EmkHM=) 5: FXlMAg6Tns5ug0sX3I9sZGNNPD4.roa (hash: 8+nZr8pDoLQyj2zJ+3NpzXLge4WTT12/Die6DTWaVCs=) 6: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: GgzRixdX6MXJDy4HgM1JI1/gnfbMFiIV3DhDn1Vvz8g=) 7: J2HRCNN0O3I0ylWoGdWNujol0fA.roa (hash: rPj3oS6cRki0EPapM96ljLrY07pTqQoIZWe0btTMRN0=) 8: Ly5l7uAGGOrfvlsGGnQdz0V4nKE.roa (hash: ZxmUNWDmKGotedZO8VKzz/Oj5QRxUTc3RwaJAGYeFSE=) 9: S4vy57KePPm5skYt1swzoPGddGE.roa (hash: KQUtpTpFRREzYju49IndpBOUgh/QmNJ4Aj5rKfHkClA=) 10: VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa (hash: zvMGZnTSXs7rRdgQq7BTWfaj5rzWax6QH5PVbXYcxAU=) 11: nO2DISCKoX95cbSl-4IE1IdCmBM.roa (hash: RSdRSi7lQ1Dk0PK2vlKk4Ff47FnbPUTG14kEWbAzlVs=) 12: p10y8t_WBLoKxkKhbrvVO3CBo7s.roa (hash: bR+UE5G2Oqk8wUwtmF/tWOLA+Bc3PLN2bliUn37gDYg=) 13: wT7vmcLVhrxJsD9cpF_QsLflW0E.roa (hash: WkCXdJU0J3BkU37zXWAXQdEI632t1NHqwLrYDW6Qn/Y=) 14: wYgSIaQwBTuITHU0HBRQkglSG0E.roa (hash: qiaCjrygoBnt3D71M1yuQyzb1QgBc8U5I1dN3wTSJ/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:98:61:cc:54:6e:c2:cf:50:47:2c:01:c0:db:a9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Aug 4 01:00:45 2025 GMT Not After : Aug 5 01:00:45 2025 GMT Subject: CN=2b149dc74b17b91da75e0718a23f09c12ef7245e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9b:a2:6d:33:05:f7:42:bb:e4:50:91:c6:60: 61:9f:c0:58:16:ba:81:cb:61:37:f5:45:14:09:85: 1a:fa:59:5d:30:63:ca:74:be:ea:1f:81:c9:09:50: 04:4a:ee:21:bf:a1:51:7c:09:ac:f6:7b:f9:e8:6d: ab:41:c1:04:95:73:f8:98:18:87:cf:1c:96:d8:2c: b3:9b:bc:2d:f0:cd:e4:f2:88:a7:3d:b0:b5:f7:6b: c6:53:a7:e6:c1:c7:0b:b1:d7:91:02:45:40:8c:55: fe:05:46:14:7a:98:99:f0:2e:c1:93:76:a8:13:66: 46:ed:de:8d:90:94:f6:e9:4f:1f:09:be:cb:6b:90: 66:eb:e9:06:f1:f5:8c:d1:a0:37:a7:96:48:7c:a8: ba:41:e4:49:0f:a9:42:89:f3:37:30:92:2a:dd:2d: 5a:4c:82:23:5a:f9:8b:4a:4a:05:ed:4d:d2:18:6f: 83:4a:b3:41:d1:b7:e5:b9:69:5b:84:7c:65:69:35: ba:a4:9e:7a:e8:3b:b5:c5:3f:d9:23:2e:a8:c8:af: 69:ea:55:27:9a:2d:f7:95:2b:48:6b:83:6d:29:55: df:ab:64:e1:53:ad:b0:4e:36:a2:11:30:e7:2c:96: 57:06:e2:34:5c:a9:8c:f9:70:10:1a:af:60:2c:64: e5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:14:9D:C7:4B:17:B9:1D:A7:5E:07:18:A2:3F:09:C1:2E:F7:24:5E X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:c6:f9:28:3f:22:2b:e6:30:bd:00:4a:24:24:21:57:56:e8: 82:6f:11:82:f9:48:02:ac:44:c2:3e:49:5f:81:c0:46:97:6f: dc:31:a2:7c:82:f7:e5:93:12:dd:5e:01:27:a1:88:57:e6:ad: ba:b6:b2:c6:30:c6:e5:8f:a4:8a:2b:0e:74:17:57:35:dd:8f: af:e6:00:98:6c:68:cf:4f:04:40:d3:b4:c1:44:49:dc:76:22: 31:11:91:00:71:55:56:30:f4:87:19:ef:6f:be:18:6c:74:7b: 0d:0f:cd:4b:ca:bb:c3:f3:89:11:a1:98:ac:56:6a:47:a4:7e: 0f:6f:c1:dd:31:cb:6b:1d:0f:5d:98:03:c2:14:3b:b2:8c:c6: 07:70:03:5d:58:94:5f:6d:f4:f9:d1:e6:f9:0c:b2:f0:30:0b: 93:1c:36:ef:de:5c:d2:e3:e6:5e:c4:4f:23:56:ef:71:e2:e2: 04:19:ea:c1:09:91:23:61:eb:4d:5c:c1:8c:ac:0f:53:2c:7e: af:d7:20:d3:04:00:f2:af:e5:62:c2:59:8f:89:f9:18:55:9d: ce:7f:4a:b5:dc:96:c8:80:43:9a:35:4a:4a:17:0d:4d:5d:98: 73:0b:f3:c0:00:1f:50:f4:11:90:8a:b3:93:11:42:0b:68:c6: 02:a8:a5:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhymGHMVG7Cz1BHLAHA26kwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjUwODA0MDEwMDQ1WhcNMjUwODA1MDEwMDQ1WjAzMTEwLwYDVQQD EygyYjE0OWRjNzRiMTdiOTFkYTc1ZTA3MThhMjNmMDljMTJlZjcyNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZuibTMF90K75FCRxmBhn8BYFrqB y2E39UUUCYUa+lldMGPKdL7qH4HJCVAESu4hv6FRfAms9nv56G2rQcEElXP4mBiH zxyW2Cyzm7wt8M3k8oinPbC192vGU6fmwccLsdeRAkVAjFX+BUYUepiZ8C7Bk3ao E2ZG7d6NkJT26U8fCb7La5Bm6+kG8fWM0aA3p5ZIfKi6QeRJD6lCifM3MJIq3S1a TIIjWvmLSkoF7U3SGG+DSrNB0bfluWlbhHxlaTW6pJ566Du1xT/ZIy6oyK9p6lUn mi33lStIa4NtKVXfq2ThU62wTjaiETDnLJZXBuI0XKmM+XAQGq9gLGTl0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsUncdLF7kdp14HGKI/CcEu9yReMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsb5KD8i K+YwvQBKJCQhV1bogm8RgvlIAqxEwj5JX4HARpdv3DGifIL35ZMS3V4BJ6GIV+at urayxjDG5Y+kiisOdBdXNd2Pr+YAmGxoz08EQNO0wURJ3HYiMRGRAHFVVjD0hxnv b74YbHR7DQ/NS8q7w/OJEaGYrFZqR6R+D2/B3THLax0PXZgDwhQ7sozGB3ADXViU X230+dHm+Qyy8DALkxw2795c0uPmXsRPI1bvceLiBBnqwQmRI2HrTVzBjKwPUyx+ r9cg0wQA8q/lYsJZj4n5GFWdzn9KtdyWyIBDmjVKShcNTV2YcwvzwAAfUPQRkIqz kxFCC2jGAqil3w== -----END CERTIFICATE-----Generated at Mon Aug 4 11:16:10 2025 by rpki-client